Binarly (firmware security research)

binarly-blog · B · candidate

https://www.binarly.io/blog

researchlang: enfetch failures: 0quiet periods: 0last fetch: 2026-11-05

Added 2026-11-05 (S1): primary for the Zyxel GS1900 exploit-recovery and patch-bypass finding (blog and advisory BRLY-2026-057). The site is client-rendered: `extract` returns a shell, and the full text is in the page's embedded payload or through the reader (`jina <URL>`). Candidate: promote to active after 3 contributing runs.

Cited in 1 entry

Citation cadence

Citation days per ISO week (1 weeks of coverage span, total 1).

CVE-2026-7273 and CVE-2026-107441, Zyxel GS1900 switches: GreyNoise caught a Red Heron-linked actor exfiltrating configurations and hashed root credentials from 996 switches in 48 countries, and Binarly shows its exploit targets a separate flaw that the June fix leaves open; only the .3C0 builds close it2026-09-22